CVE-2008-1104 Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function...
HighCVSS 9.3
EPSS 22.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foxitsoftware foxit reader | <= 2.3 | No fix listed |
| foxitsoftware foxit reader | = 2.0 | No fix listed |
| foxitsoftware foxit reader | = 2.2 | No fix listed |
References
- 29941 third-party-advisory
- secunia.com
- 3899 third-party-advisory
- support.nortel.com broken-link
- VU#119747 third-party-advisory us-government-resource
- 20080520 Secunia Research: Foxit Reader "util.printf()" Buffer Overflow mailing-list
- 29288 third-party-advisory vdb-entry
- 1020050 third-party-advisory vdb-entry
- ADV-2008-1572 permissions-required vdb-entry
- foxitreader-utilprintf-bo(42531) vdb-entry